Reflected optic camera module for iris recognition in a computing device

ABSTRACT

Described embodiments include systems and methods for acquiring iris biometric data. An optical entrance of an optical medium may receive a ray incident on the optical entrance, the ray comprising biometric data. An interface of the optical medium with a second medium may receive the received ray at a first angle greater than a critical angle of the interface to enable total internal reflection of the received incident ray. A reflective coating, prism or other mechanism may be used in place of the interface to redirect the received ray or bend the optical path of the received ray. An optical exit of the optical medium may couple the reflected or redirected ray to a sensor for acquiring the biometric data. The ray may be incident on the optical entrance at a second angle relative to an axis of the sensor that is less than 90 degrees.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims the benefit of and priority to U.S. ProvisionalApplication Ser. No. 62/270,149, filed Dec. 21, 2015, entitled“REFLECTED OPTIC CAMERA MODULE FOR IRIS RECOGNITION IN A COMPUTINGDEVICE”. The entire content of the foregoing is incorporated herein byreference for all purposes.

FIELD OF THE DISCLOSURE

This disclosure generally relates to systems and methods for biometricacquisition, including but not limited to systems and methods foracquiring a biometric feature oriented at an angle to a computingdevice.

BACKGROUND

The diversity and number of computing devices is increasingexponentially. For example, there are portable devices such as laptopsand tablets, and traditional desk-bound computing platforms. Some ofthese devices may include mounted cameras, but these cameras aretypically unsuitable for acquiring iris biometric data forauthentication purposes.

SUMMARY

Some embodiments of the present invention relate generally toapparatuses, systems and methods for acquiring a biometric featureoriented at an angle to a computing device are provided. Someembodiments of the present systems and methods use a reflected opticcamera module for iris recognition, incorporated in a computing device.The reflected optic camera module may support an optical path for lightrays incident from a user (e.g., an iris of the user) that enter thecamera module, such that the light rays are redirected to an imagesensor mounted at an angle from the incident light rays. For instance,and in some embodiments, the reflected optic camera module ismanufactured as a solid piece of acrylic glass with an entrance surfacefor incident rays to enter, a reflective surface for total internalreflection of the entered rays, and an exit surface for coupling thereflected rays to an image sensor.

In some aspects, the present disclosure is directed to a system foracquiring biometric data from an iris oriented at an angle to acomputing device. The system may include a sensor of an iris biometriccamera mounted on a computing device. An optical entrance of an opticalmedium of the iris biometric camera may be configured to receive lightreflected off an iris and incident on the optical entrance at a firstangle relative to an optical axis of the sensor that is greater thanzero degree and less than 90 degrees. The received light may include aniris biometric data for biometric matching. An interface between theoptical medium and a second medium may be configured so that thereceived light is incident at a second angle greater than a criticalangle of the interface to cause total internal reflection of thereceived light within the optical medium. An optical exit of the opticalmedium may be configured to couple the total internally reflected lightto the sensor for acquiring the iris biometric data.

In some embodiments, the optical entrance is oriented towards anexpected gaze direction of a subject using the computing device. Thesensor may be mounted on a circuit board of the computing device andoriented away from the expected gaze direction. The iris biometriccamera may be integrated with a keyboard or an input pad of thecomputing device. The optical medium may correspond to a monolithicpiece of material with a predetermined refractive index. The secondmedium may comprise air or a vacuum.

In certain embodiments, a plane of the interface is at an angle of lessthan 45 degrees relative to the optical axis of the sensor. At least oneof the optical entrance or the optical exit may incorporate a lensstructure. The sensor may be configured to acquire the iris biometricdata for biometric matching to provide access control to a correspondingsubject.

In certain aspects, the present disclosure is directed to a method foracquiring biometric data from an iris oriented at an angle to acomputing device. The method may include receiving, via an opticalentrance of an optical medium of an iris biometric camera mounted on acomputing device, light reflected off an iris and incident on theoptical entrance at a first angle relative to an optical axis of asensor that is greater than zero degree and less than 90 degrees. Thereceived light may include iris biometric data for biometric matching.An interface between the optical medium and a second medium may causetotal internal reflection of the received light within the opticalmedium. The received light may be incident at a second angle greaterthan a critical angle of the interface. An optical exit of the opticalmedium may couple the total internally reflected light to the sensor foracquiring the iris biometric data.

In some embodiments, the method may include positioning the opticalentrance to be oriented towards an expected gaze direction of a subjectusing the computing device. The sensor may be oriented away from theexpected gaze direction. The iris biometric camera may be integratedwith a keyboard or an input pad of the computing device. The opticalmedium may correspond to a monolithic piece of material with apredetermined refractive index, and the second medium comprises air or avacuum. A plane of the interface may be at an angle of less than 45degrees relative to the optical axis of the sensor. The sensor mayacquire the iris biometric data for biometric matching to provide accesscontrol to a corresponding subject.

In certain aspects, the present disclosure is directed to a system foracquiring biometric data from an iris oriented at an angle to acomputing device. The system may include a sensor of an iris biometriccamera mounted on a computing device. An optical entrance of an irisbiometric camera may be configured to receive light reflected off aniris and incident on the optical entrance at a first angle relative toan optical axis of the sensor that is greater than zero degree and lessthan 90 degrees. The received light may include iris biometric data forbiometric matching. Redirection optics of the iris biometric camera maybe configured to alter the path of the received light towards thesensor. An optical exit of the iris biometric camera may be configuredto couple the light from the redirection optics to the sensor foracquiring the iris biometric data.

In some embodiments, the optical entrance is oriented towards anexpected gaze direction of a subject using the computing device. Thesensor may be mounted in the computing device and oriented away from theexpected gaze direction. The iris biometric camera may be integratedwith a keyboard or an input pad of the computing device. The redirectionoptics may incorporate at least one of a reflecting surface or a prism.At least one of the optical entrance or the optical exit may comprise alens. In certain embodiments, the sensor is configured to acquire theiris biometric data for biometric matching to provide access control toa corresponding subject.

In some aspects, the present disclosure describes systems and methodsfor acquiring a biometric feature oriented at an angle to a computingdevice. An optical entrance of an optical medium may receive a rayincident on the optical entrance, the ray comprising biometric data of asubject. An interface of the optical medium with a second medium mayreceive the received ray at a first angle greater than a critical angleof the interface to enable total internal reflection of the receivedincident ray. An optical exit of the optical medium may couple the totalinternally reflected ray to a sensor for acquiring the biometric datafrom the total internally reflected ray. The ray may be incident on theoptical entrance at a second angle relative to an axis of the sensorthat is less than 90 degrees.

It should be appreciated that all combinations of the foregoing conceptsand additional concepts discussed in greater detail below (provided suchconcepts are not mutually inconsistent) are contemplated as being partof the inventive subject matter disclosed herein. In particular, allcombinations of claimed subject matter appearing at the end of thisdisclosure are contemplated as being part of the inventive subjectmatter disclosed herein. It should also be appreciated that terminologyexplicitly employed herein that also may appear in any disclosureincorporated by reference should be accorded a meaning most consistentwith the particular concepts disclosed herein.

BRIEF DESCRIPTION OF THE DRAWINGS

The skilled artisan would understand that the drawings primarily are forillustration purposes and are not intended to limit the scope of theinventive subject matter described herein. The drawings are notnecessarily to scale; in some instances, various aspects of theinventive subject matter disclosed herein may be shown exaggerated orenlarged in the drawings to facilitate an understanding of differentfeatures. In the drawings, like reference characters generally refer tolike features (e.g., functionally similar and/or structurally similarelements).

FIG. 1A is a block diagram illustrative of an embodiment of a networkedenvironment with a client machine that communicates with a server.

FIGS. 1B and 1C are block diagrams illustrative of embodiments ofcomputing machines for practicing the methods and systems describedherein.

FIGS. 2A and 2B are diagrams illustrating a system for acquiringbiometric data from an iris oriented at an angle, according to someembodiments;

FIG. 2C depicts one example embodiment of a system using a reflectedoptic camera module;

FIGS. 2D-2G depict a camera module that has a lens and an image sensorarranged so that the optical path is a straight line, according to someembodiments;

FIGS. 2H and 2I depict embodiments of a system using a reflected opticcamera module.

FIG. 2J illustrates an angle of incidence in a system using a reflectedoptic camera module, according to some embodiments;

FIG. 2K depicts a system using a reflected optic camera module,according to some embodiments;

FIGS. 2L and 2M illustrate embodiments of a reflected optics cameramodule;

FIGS. 2N and 2O depict different view of an embodiment of a cameramodule; and

FIG. 2P is a flow diagram illustrating a method for acquiring biometricdata from an iris oriented at an angle to a computing device, accordingto some embodiments.

DETAILED DESCRIPTION

It should be appreciated that all combinations of the foregoing conceptsand additional concepts discussed in greater detail below (provided suchconcepts are not mutually inconsistent) are contemplated as being partof the inventive subject matter disclosed herein. In particular, allcombinations of claimed subject matter appearing at the end of thisdisclosure are contemplated as being part of the inventive subjectmatter disclosed herein. It should also be appreciated that terminologyexplicitly employed herein that also may appear in any disclosureincorporated by reference should be accorded a meaning most consistentwith the particular concepts disclosed herein.

For purposes of reading the description of the various embodimentsbelow, the following descriptions of the sections of the specificationand their respective contents may be helpful:

-   -   Section A describes a network environment and computing        environment which may be useful for practicing embodiments        described herein; and    -   Section B describes embodiments of systems and methods using a        reflected optic camera module.        A. Network and Computing Environment

Before addressing specific embodiments of the present solution, adescription of system components and features suitable for use in thepresent systems and methods may be helpful. FIG. 1A illustrates oneembodiment of a computing environment 101 that includes one or moreclient machines 102A-102N (generally referred to herein as “clientmachine(s) 102”) in communication with one or more servers 106A-106N(generally referred to herein as “server(s) 106”). Installed in betweenthe client machine(s) 102 and server(s) 106 is a network 104.

In one embodiment, the computing environment 101 can include anappliance installed between the server(s) 106 and client machine(s) 102.This appliance can manage client/server connections, and in some casescan load balance client connections amongst a plurality of backendservers. The client machine(s) 102 can in some embodiment be referred toas a single client machine 102 or a single group of client machines 102,while server(s) 106 may be referred to as a single server 106 or asingle group of servers 106. In one embodiment a single client machine102 communicates with more than one server 106, while in anotherembodiment a single server 106 communicates with more than one clientmachine 102. In yet another embodiment, a single client machine 102communicates with a single server 106.

A client machine 102 can, in some embodiments, be referenced by any oneof the following terms: client machine(s) 102; client(s); clientcomputer(s); client device(s); client computing device(s); localmachine; remote machine; client node(s); endpoint(s); endpoint node(s);or a second machine. The server 106, in some embodiments, may bereferenced by any one of the following terms: server(s), local machine;remote machine; server farm(s), host computing device(s), or a firstmachine(s).

The client machine 102 can in some embodiments execute, operate orotherwise provide an application that can be any one of the following:software; a program; executable instructions; a virtual machine; ahypervisor; a web browser; a web-based client; a client-serverapplication; a thin-client computing client; an ActiveX control; a Javaapplet; software related to voice over internet protocol (VoIP)communications like a soft IP telephone; an application for streamingvideo and/or audio; an application for facilitating real-time-datacommunications; a HTTP client; a FTP client; an Oscar client; a Telnetclient; or any other set of executable instructions. Still otherembodiments include a client device 102 that displays application outputgenerated by an application remotely executing on a server 106 or otherremotely located machine. In these embodiments, the client device 102can display the application output in an application window, a browser,or other output window. In one embodiment, the application is a desktop,while in other embodiments the application is an application thatgenerates a desktop.

The computing environment 101 can include more than one server 106A-106Nsuch that the servers 106A-106N are logically grouped together into aserver farm 106. The server farm 106 can include servers 106 that aregeographically dispersed and logically grouped together in a server farm106, or servers 106 that are located proximate to each other andlogically grouped together in a server farm 106. Geographicallydispersed servers 106A-106N within a server farm 106 can, in someembodiments, communicate using a WAN, MAN, or LAN, where differentgeographic regions can be characterized as: different continents;different regions of a continent; different countries; different states;different cities; different campuses; different rooms; or anycombination of the preceding geographical locations. In some embodimentsthe server farm 106 may be administered as a single entity, while inother embodiments the server farm 106 can include multiple server farms106.

In some embodiments, a server farm 106 can include servers 106 thatexecute a substantially similar type of operating system platform (e.g.,WINDOWS NT, manufactured by Microsoft Corp. of Redmond, Wash., UNIX,LINUX, or SNOW LEOPARD.) In other embodiments, the server farm 106 caninclude a first group of servers 106 that execute a first type ofoperating system platform, and a second group of servers 106 thatexecute a second type of operating system platform. The server farm 106,in other embodiments, can include servers 106 that execute differenttypes of operating system platforms.

The server 106, in some embodiments, can be any server type. In otherembodiments, the server 106 can be any of the following server types: afile server; an application server; a web server; a proxy server; anappliance; a network appliance; a gateway; an application gateway; agateway server; a virtualization server; a deployment server; a SSL VPNserver; a firewall; a web server; an application server or as a masterapplication server; a server 106 executing an active directory; or aserver 106 executing an application acceleration program that providesfirewall functionality, application functionality, or load balancingfunctionality. In some embodiments, a server 106 may be a RADIUS serverthat includes a remote authentication dial-in user service. Someembodiments include a first server 106A that receives requests from aclient machine 102, forwards the request to a second server 106B, andresponds to the request generated by the client machine 102 with aresponse from the second server 106B. The first server 106A can acquirean enumeration of applications available to the client machine 102 andwell as address information associated with an application server 106hosting an application identified within the enumeration ofapplications. The first server 106A can then present a response to theclient's request using a web interface, and communicate directly withthe client 102 to provide the client 102 with access to an identifiedapplication.

Client machines 102 can, in some embodiments, be a client node thatseeks access to resources provided by a server 106. In otherembodiments, the server 106 may provide clients 102 or client nodes withaccess to hosted resources. The server 106, in some embodiments,functions as a master node such that it communicates with one or moreclients 102 or servers 106. In some embodiments, the master node canidentify and provide address information associated with a server 106hosting a requested application, to one or more clients 102 or servers106. In still other embodiments, the master node can be a server farm106, a client 102, a cluster of client nodes 102, or an appliance.

One or more clients 102 and/or one or more servers 106 can transmit dataover a network 104 installed between machines and appliances within thecomputing environment 101. The network 104 can comprise one or moresub-networks, and can be installed between any combination of theclients 102, servers 106, computing machines and appliances includedwithin the computing environment 101. In some embodiments, the network104 can be: a local-area network (LAN); a metropolitan area network(MAN); a wide area network (WAN); a primary network 104 comprised ofmultiple sub-networks 104 located between the client machines 102 andthe servers 106; a primary public network 104 with a private sub-network104; a primary private network 104 with a public sub-network 104; or aprimary private network 104 with a private sub-network 104. Stillfurther embodiments include a network 104 that can be any of thefollowing network types: a point to point network; a broadcast network;a telecommunications network; a data communication network; a computernetwork; an ATM (Asynchronous Transfer Mode) network; a SONET(Synchronous Optical Network) network; a SDH (Synchronous DigitalHierarchy) network; a wireless network; a wireline network; or a network104 that includes a wireless link where the wireless link can be aninfrared channel or satellite band. The network topology of the network104 can differ within different embodiments, possible network topologiesinclude: a bus network topology; a star network topology; a ring networktopology; a repeater-based network topology; or a tiered-star networktopology. Additional embodiments may include a network 104 of mobiletelephone networks that use a protocol to communicate among mobiledevices, where the protocol can be any one of the following: AMPS; TDMA;CDMA; GSM; GPRS UMTS; 3G; 4G; or any other protocol able to transmitdata among mobile devices.

Illustrated in FIG. 1B is an embodiment of a computing device 100, wherethe client machine 102 and server 106 illustrated in FIG. 1A can bedeployed as and/or executed on any embodiment of the computing device100 illustrated and described herein. Included within the computingdevice 100 is a system bus 150 that communicates with the followingcomponents: a central processing unit 121; a main memory 122; storagememory 128; an input/output (I/O) controller 123; display devices124A-124N; an installation device 116; and a network interface 118. Inone embodiment, the storage memory 128 includes: an operating system,and software 120. The I/O controller 123, in some embodiments, isfurther connected to a key board 126, and a pointing device 127. Otherembodiments may include an I/O controller 123 connected to more than oneinput/output device 130A-130N.

FIG. 1C illustrates one embodiment of a computing device 100, where theclient machine 102 and server 106 illustrated in FIG. 1A can be deployedas and/or executed on any embodiment of the computing device 100illustrated and described herein. Included within the computing device100 is a system bus 150 that communicates with the following components:a bridge 170, and a first I/O device 130A. In another embodiment, thebridge 170 is in further communication with the main central processingunit 121, where the central processing unit 121 can further communicatewith a second I/O device 130B, a main memory 122, and a cache memory140. Included within the central processing unit 121, are I/O ports, amemory port 103, and a main processor.

Embodiments of the computing machine 100 can include a centralprocessing unit 121 characterized by any one of the following componentconfigurations: logic circuits that respond to and process instructionsfetched from the main memory unit 122; a microprocessor unit, such as:those manufactured by Intel Corporation; those manufactured by MotorolaCorporation; those manufactured by Transmeta Corporation of Santa Clara,Calif.; the RS/6000 processor such as those manufactured byInternational Business Machines; a processor such as those manufacturedby Advanced Micro Devices; or any other combination of logic circuits.Still other embodiments of the central processing unit 122 may includeany combination of the following: a microprocessor, a microcontroller, acentral processing unit with a single processing core, a centralprocessing unit with two processing cores, or a central processing unitwith more than one processing core.

While FIG. 1C illustrates a computing device 100 that includes a singlecentral processing unit 121, in some embodiments the computing device100 can include one or more processing units 121. In these embodiments,the computing device 100 may store and execute firmware or otherexecutable instructions that, when executed, direct the one or moreprocessing units 121 to simultaneously execute instructions or tosimultaneously execute instructions on a single piece of data. In otherembodiments, the computing device 100 may store and execute firmware orother executable instructions that, when executed, direct the one ormore processing units to each execute a section of a group ofinstructions. For example, each processing unit 121 may be instructed toexecute a portion of a program or a particular module within a program.

In some embodiments, the processing unit 121 can include one or moreprocessing cores. For example, the processing unit 121 may have twocores, four cores, eight cores, etc. In one embodiment, the processingunit 121 may comprise one or more parallel processing cores. Theprocessing cores of the processing unit 121 may in some embodimentsaccess available memory as a global address space, or in otherembodiments, memory within the computing device 100 can be segmented andassigned to a particular core within the processing unit 121. In oneembodiment, the one or more processing cores or processors in thecomputing device 100 can each access local memory. In still anotherembodiment, memory within the computing device 100 can be shared amongstone or more processors or processing cores, while other memory can beaccessed by particular processors or subsets of processors. Inembodiments where the computing device 100 includes more than oneprocessing unit, the multiple processing units can be included in asingle integrated circuit (IC). These multiple processors, in someembodiments, can be linked together by an internal high speed bus, whichmay be referred to as an element interconnect bus.

In embodiments where the computing device 100 includes one or moreprocessing units 121, or a processing unit 121 including one or moreprocessing cores, the processors can execute a single instructionsimultaneously on multiple pieces of data (SIMD), or in otherembodiments can execute multiple instructions simultaneously on multiplepieces of data (MIMD). In some embodiments, the computing device 100 caninclude any number of SIMD and MIMD processors.

The computing device 100, in some embodiments, can include an imageprocessor, a graphics processor or a graphics processing unit. Thegraphics processing unit can include any combination of software andhardware, and can further input graphics data and graphics instructions,render a graphic from the inputted data and instructions, and output therendered graphic. In some embodiments, the graphics processing unit canbe included within the processing unit 121. In other embodiments, thecomputing device 100 can include one or more processing units 121, whereat least one processing unit 121 is dedicated to processing andrendering graphics.

One embodiment of the computing machine 100 includes a centralprocessing unit 121 that communicates with cache memory 140 via asecondary bus also known as a backside bus, while another embodiment ofthe computing machine 100 includes a central processing unit 121 thatcommunicates with cache memory via the system bus 150. The local systembus 150 can, in some embodiments, also be used by the central processingunit to communicate with more than one type of I/O device 130A-130N. Insome embodiments, the local system bus 150 can be any one of thefollowing types of buses: a VESA VL bus; an ISA bus; an EISA bus; aMicroChannel Architecture (MCA) bus; a PCI bus; a PCI-X bus; aPCI-Express bus; or a NuBus. Other embodiments of the computing machine100 include an I/O device 130A-130N that is a video display 124 thatcommunicates with the central processing unit 121. Still other versionsof the computing machine 100 include a processor 121 connected to an I/Odevice 130A-130N via any one of the following connections:HyperTransport, Rapid I/O, or InfiniBand. Further embodiments of thecomputing machine 100 include a processor 121 that communicates with oneI/O device 130A using a local interconnect bus and a second I/O device130B using a direct connection.

The computing device 100, in some embodiments, includes a main memoryunit 122 and cache memory 140. The cache memory 140 can be any memorytype, and in some embodiments can be any one of the following types ofmemory: SRAM; BSRAM; or EDRAM. Other embodiments include cache memory140 and a main memory unit 122 that can be any one of the followingtypes of memory: Static random access memory (SRAM), Burst SRAM orSynchBurst SRAM (BSRAM); Dynamic random access memory (DRAM); Fast PageMode DRAM (FPM DRAM); Enhanced DRAM (EDRAM), Extended Data Output RAM(EDO RAM); Extended Data Output DRAM (EDO DRAM); Burst Extended DataOutput DRAM (BEDO DRAM); Enhanced DRAM (EDRAM); synchronous DRAM(SDRAM); JEDEC SRAM; PC100 SDRAM; Double Data Rate SDRAM (DDR SDRAM);Enhanced SDRAM (ESDRAM); SyncLink DRAM (SLDRAM); Direct Rambus DRAM(DRDRAM); Ferroelectric RAM (FRAM); or any other type of memory. Furtherembodiments include a central processing unit 121 that can access themain memory 122 via: a system bus 150; a memory port 103; or any otherconnection, bus or port that allows the processor 121 to access memory122.

Referring again to FIG. 1B, the computing device 100 can support anysuitable installation device 116, such as a disk drive, a CD-ROM drive,a CD-R/RW drive, a DVD-ROM drive, a flash memory drive, tape drives ofvarious formats, USB device, hard-drive, a network interface, or anyother device suitable for installing software and programs. Thecomputing device 100 can further include a storage device, such as oneor more hard disk drives or redundant arrays of independent disks, forstoring an operating system and other related software, and for storingapplication software programs such as any program or software 120 forimplementing (e.g., built and/or designed for) the systems and methodsdescribed herein. Optionally, any of the installation devices 116 couldalso be used as the storage device. Additionally, the operating systemand the software can be run from a bootable medium.

The computing device 100 can include a network interface 118 tointerface to a Local Area Network (LAN), Wide Area Network (WAN) or theInternet through a variety of connections including, but not limited to,standard telephone lines, LAN or WAN links (e.g., 802.11, T1, T3, 56 kb,X.25, SNA, DECNET), broadband connections (e.g., ISDN, Frame Relay, ATM,Gigabit Ethernet, Ethernet-over-SONET), wireless connections, or somecombination of any or all of the above. Connections can also beestablished using a variety of communication protocols (e.g., TCP/IP,IPX, SPX, NetBIOS, Ethernet, ARCNET, SONET, SDH, Fiber Distributed DataInterface (FDDI), RS232, RS485, IEEE 802.11, IEEE 802.11a, IEEE 802.11b,IEEE 802.11g, CDMA, GSM, WiMax and direct asynchronous connections). Oneversion of the computing device 100 includes a network interface 118able to communicate with additional computing devices 100′ via any typeand/or form of gateway or tunneling protocol such as Secure Socket Layer(SSL) or Transport Layer Security (TLS), or the Citrix Gateway Protocolmanufactured by Citrix Systems, Inc. Versions of the network interface118 can comprise any one of: a built-in network adapter; a networkinterface card; a PCMCIA network card; a card bus network adapter; awireless network adapter; a USB network adapter; a modem; or any otherdevice suitable for interfacing the computing device 100 to a networkcapable of communicating and performing the methods and systemsdescribed herein.

Embodiments of the computing device 100 include any one of the followingI/O devices 130A-130N: a keyboard 126; a pointing device 127; mice;trackpads; an optical pen; trackballs; microphones; drawing tablets;video displays; speakers; inkjet printers; laser printers; anddye-sublimation printers; or any other input/output device able toperform the methods and systems described herein. An I/O controller 123may in some embodiments connect to multiple I/O devices 103A-130N tocontrol the one or more I/O devices. Some embodiments of the I/O devices130A-130N may be configured to provide storage or an installation medium116, while others may provide a universal serial bus (USB) interface forreceiving USB storage devices such as the USB Flash Drive line ofdevices manufactured by Twintech Industry, Inc. Still other embodimentsinclude an I/O device 130 that may be a bridge between the system bus150 and an external communication bus, such as: a USB bus; an AppleDesktop Bus; an RS-232 serial connection; a SCSI bus; a FireWire bus; aFireWire 800 bus; an Ethernet bus; an AppleTalk bus; a Gigabit Ethernetbus; an Asynchronous Transfer Mode bus; a HIPPI bus; a Super HIPPI bus;a SerialPlus bus; a SCI/LAMP bus; a FibreChannel bus; or a SerialAttached small computer system interface bus.

In some embodiments, the computing machine 100 can execute any operatingsystem, while in other embodiments the computing machine 100 can executeany of the following operating systems: versions of the MICROSOFTWINDOWS operating systems; the different releases of the Unix and Linuxoperating systems; any version of the MAC OS manufactured by AppleComputer; OS/2, manufactured by International Business Machines; Androidby Google; any embedded operating system; any real-time operatingsystem; any open source operating system; any proprietary operatingsystem; any operating systems for mobile computing devices; or any otheroperating system. In still another embodiment, the computing machine 100can execute multiple operating systems. For example, the computingmachine 100 can execute PARALLELS or another virtualization platformthat can execute or manage a virtual machine executing a first operatingsystem, while the computing machine 100 executes a second operatingsystem different from the first operating system.

The computing machine 100 can be embodied in any one of the followingcomputing devices: a computing workstation; a desktop computer; a laptopor notebook computer; a server; a handheld computer; a mobile telephone;a portable telecommunication device; a media playing device; a gamingsystem; a mobile computing device; a netbook, a tablet; a device of theIPOD or IPAD family of devices manufactured by Apple Computer; any oneof the PLAYSTATION family of devices manufactured by the SonyCorporation; any one of the Nintendo family of devices manufactured byNintendo Co; any one of the XBOX family of devices manufactured by theMicrosoft Corporation; or any other type and/or form of computing,telecommunications or media device that is capable of communication andthat has sufficient processor power and memory capacity to perform themethods and systems described herein. In other embodiments the computingmachine 100 can be a mobile device such as any one of the followingmobile devices: a JAVA-enabled cellular telephone or personal digitalassistant (PDA); any computing device that has different processors,operating systems, and input devices consistent with the device; or anyother mobile computing device capable of performing the methods andsystems described herein. In still other embodiments, the computingdevice 100 can be any one of the following mobile computing devices: anyone series of Blackberry, or other handheld device manufactured byResearch In Motion Limited; the iPhone manufactured by Apple Computer;Palm Pre; a Pocket PC; a Pocket PC Phone; an Android phone; or any otherhandheld mobile device. Having described certain system components andfeatures that may be suitable for use in the present systems andmethods, further aspects are addressed below.

B. Reflected Optic Camera Module

According to some embodiments, systems and methods for acquiring abiometric feature oriented at an angle to a computing device areprovided. Some embodiments of the present systems and methods use areflected optic camera module for iris recognition, incorporated in acomputing device. The reflected optic camera module may support anoptical path for light rays incident from a user (e.g., an iris of theuser) that enter the camera module, such that the light rays areredirected to an image sensor mounted at an angle from the incidentlight rays. For instance, and in some embodiments, the reflected opticcamera module is manufactured as a solid piece of acrylic glass with anentrance surface for incident rays to enter, a reflective surface fortotal internal reflection of the entered rays, and an exit surface forcoupling the reflected rays to an image sensor.

Referring to FIG. 2A, one embodiment of a system for acquiring abiometric feature oriented at an angle is depicted. In brief overview,the system may include a computing device and/or a reflected opticcamera module mounted onto the computing device. The computing devicemay include any embodiment of the computing devices referenced above inconnection with FIGS. 1A-1C. By way of illustration, and not intended tobe limiting in any way, the computing devices may include devices suchas computers (e.g., laptops, netbooks, desktop computers), tablets andhybrid devices (e.g., with keyboard and/or other separable or attachedsubcomponents), printers or office equipment (e.g., multi-functionprinters, photocopiers, scanners), keyboards or other input devices,docking stations (e.g., for certain computing devices), medical devices(e.g., with electronic components), lottery sales terminals or devices,cash registers or other transaction devices, automated teller machine(ATM) or other banking terminals or devices, security or authenticationterminals, control panels or dashboards, and casino gaming equipment.The reflected optic camera module may include an optical entrance (e.g.,an entrance lens/surface), a reflective surface or prism component(e.g., a mirrored surface), an optical exit (e.g., an exitlens/surface), and/or an image sensor coupled to the optical exit, anexample embodiment of which is depicted in FIG. 2B. The image sensor maybe aligned with and/or connected to a printed circuit board (PCB) of thecomputing device.

In some embodiments, a camera module refers to a device comprising oneor more camera lenses, a reflective component, an image sensor, and/or acase or body that contains the one or more lenses and the image sensor.In certain embodiments, a reflected optic camera module provides anoptical path (e.g., through its one or more lenses) that is not astraight line, but is angled (e.g., by a surface) so that an opticalentrance of the camera module can point in a different direction thanthe image sensor. Such a reflected optic camera module can align withlocation(s) and/or direction(s) of a user' eye(s), relative to thecomputing device's orientation.

For example, typical straight optics of other camera modules can make itdifficult to mount such a camera module on a circuit board of acomputing device in any direction other than 0 and 90 degrees relativeto the surface of the computing device's circuit board. Moreover, a usertypically faces the user's computing device (e.g., computer) at an angleother than 0 or 90 degrees from a main surface (e.g., a keyboard) of thecomputing device, the main surface being typically parallel to thecircuit board. In such cases, the adjustability of camera module opticalpath for different mounting locations can be limited. Changing theorientation of camera modules built with typical straight optics canrequire special mounting operations during manufacturing, which mayincrease cost and opportunity for error. Typical straight optics canmake camera modules too large to fit into computer industrial designs(into a computer chassis, for instance). In some embodiments, mirrorscan be utilized to achieve non-straight optics. However the use ofmirrors can be expensive. In comparison, incident angles of roughly 42degrees or more can provide total internal reflection and can eliminatethe need for reflective coatings or mirrors.

In some embodiments, the present systems and methods allow an irisrecognition device (camera module) to be mounted on a circuit board of acomputing device (e.g., on the main PCB near/under the keyboard of alaptop computer, directly on the main CPU board). An image sensor of acamera module is typically mounted to the circuit board surface, in oneor more embodiments. In certain embodiments, the reflected optic cameramodule has an optical lens and a reflective surface interposed in theoptical path of the lens so that the lens' opening towards the subject(optical entrance) is not in a straight line with a lens opening towardsthe image sensor (optical exit). For example, one lens opening (opticalentrance) may be at an angle (e.g. 45 degrees) from the other lensopening (optical exit). A subject viewed by the camera, and acorresponding incident ray, can be aligned with or in line (0 degree) tothe lens entrance. The optical path can eventually connect with, orenter the image sensor at a perpendicular axis. Thus, the reflectiveoptic of the camera module can allow the subject to be located at anangle relative to the image sensor.

In some embodiments, the reflective surface or component (andcorresponding reflective angle) of the reflected optic camera module isset during lens manufacturing. The reflective component may comprise aprism, mirror, surfaced lens element or surface that uses total internalreflection, and no mirrored coating for example.

By way of background and in some embodiments, iris recognition may beused to protect computing devices from unwanted or unauthorized users.For example, iris recognition can be set up to allow only the owner of alaptop to operate the laptop. Iris recognition may use a camera tocapture one or more images of the user's eyes. The camera should bepointed towards the user's face or eyes, in order to capture biometricdata for iris recognition. Computing devices frequently have no internalmounting options for such a camera. For example, a laptop display bezelis too thin to contain such a camera suitable for iris biometricacquisition. Such a camera, if mounted on a main PCB of a laptop wouldpoint straight up, away from the user.

FIG. 2C depicts one example embodiment of a system using a reflectedoptic camera module. A user's eyes or gaze are at an angle to acorresponding computing device. As such, the user's face and/or eyes maybe at an angle relative to a surface of keyboard. The surface of thekeyboard is at the same orientation as the main PCB of laptop assembly,in one or more embodiments. As discussed in connection with FIGS. 2A-2B,embodiments of the present system use reflected optics to bend theoptical light path so that the camera module can capture an image of auser at an angle to the computing device. The camera module usingreflected optics may be mounted on a main PCB of the computing device(e.g., a laptop). The camera module is able to capture images of theuser's face and/or eye(s). Embodiments of the present system allow anadjustable angle between the computing device and the user's face. Thecamera module can be mounted in the computing device with the imagingangle set exactly as required by the computing device's user interfacedesign. The present system can provide a convenient and/orcost-effective solution to mounting a camera in a computing device thatcan capture images of the user's face and/or eye(s).

FIGS. 2D-2G depict a camera module that has a lens and an image sensorarranged so that the optical path is a straight line, in contrast withthe reflected optic camera module discussed above. With a camera modulehaving a straight line optical path, an object to be imaged has to bepositioned and oriented to be 0 degrees relative to the image sensor'sfacing direction, as depicted in FIGS. 2D and 2G. FIG. 2D, for instance,depicts a typical arrangement of a lens and image sensor with a straightline optical path, and having electrical contact of the image sensorthat connect with a PCB of a computing device on which the sensor ismounted. FIG. 2E depicts components (lens and image sensor) in a crosssectional view of a camera module having a straight line optical path.FIG. 2F depicts a corresponding embodiment of a camera module having astraight line optical path. FIG. 2G shows that a camera module having astraight line optical path may only capture an image of an objectoriented at 0 degrees relative to a perpendicular axis of the PCB (andof the laptop keyboard surface, for instance). Capturing an image of auser, say at 45 degrees relative to the keyboard surface for example,would require mounting such a camera module at an angle (i.e., 45degrees) relative to the PCB, which is complicated and costly.

FIG. 2H depicts one embodiment of a system using a reflected opticcamera module. In the depicted example, a reflected optic camera modulecaptures an image of a user at an adjustable angle to the image sensor.The example shows the user at 45 degrees relative to the vertical, theentrance lens at 45 degrees relative to the vertical, the reflectiveportion of the module at 22.5 degrees relative to the vertical, the exitlens at 0 degree relative to the vertical, and the image sensor facingup at 0 degree relative to the vertical.

FIG. 2I depicts an embodiment of a system using a reflected optic cameramodule. As depicted, a reflected optic camera module captures an imageof a user at an adjustable angle to the image sensor. FIG. 2I moregenerally shows the user at an entrance angle (EA) or user angle (UA)relative to the vertical, the reflective portion of the module at areflective surface angle (RA) of EA/2 or UA/2 degrees relative to thevertical, the exit lens at 0 degree relative to the vertical, and theimage sensor facing up at 0 degree relative to the vertical. Some designparameters of the adjustable reflected optic camera module may berepresented in some embodiments as:Entrance lens angle=User angleEA=UAReflective surface angle=(Entrance lens angle/2)RA=(EA/2)orReflective surface angle=(User angle/2)RA=(UA/2)

Because manufacturing a lens with a reflective coating adds cost, someembodiments of the present system takes advantage of optical propertiesof lens material to create a reflective surface without reflective orspecial coating(s). The reflected optic camera module may be designed sothat the angle of the reflective surface is combined with the opticalproperties of the lens material to cause total internal reflectionwithout a mirrored surface coating. A complete camera module may bedesigned based on a targeted or desired user angle, optical path, and/orangle of incidence.

FIG. 2J illustrates an angle of incidence in a system using a reflectedoptic camera module. A critical angle is the angle of incidence abovewhich total internal reflection occurs (e.g., within glass medium of thereflected optic camera module). The angle of incidence may be measuredwith respect to the normal at a refractive boundary (e.g., according toSnell's law) or interface. For instance, consider a light ray passingfrom the glass medium into air. At a small initial angle of incidence, alight ray emanates from the interface and bends towards the glass. Whenthe incident angle is increased sufficiently, the transmitted angle (inair) reaches 90 degrees. It is at this point that no light istransmitted into air. The equation for the critical angle may berepresented as:

${\theta_{c} = {\theta_{i} = {\arcsin\left( \frac{n_{2}}{n_{1}} \right)}}},$

If the incident ray is precisely at the critical angle, the refractedray is tangent to the boundary at the point of incidence. If forexample, visible light were traveling through acrylic glass (with anindex of refraction of approximately 1.50 for instance) into air (withan index of refraction assumed to be 1.00), the critical angle for lightfrom acrylic glass into air may be calculated to be:

$\theta_{c} = {{{arc}\;{\sin\left( \frac{1.00}{1.50} \right)}} = {41.8{{^\circ}.}}}$

In this case, light incident on the border with an angle less than 41.8°would be partially transmitted, while light incident on the border atangles larger than 41.8° with respect to normal would be totallyinternally reflected. In embodiments of the present system using areflected optic camera module, the angle of incidence is typicallygreater than 42 degrees. Therefore, total internal reflection canprovide a reflective surface without using a mirrored coating. This isillustrated with respect to FIG. 2K, which depicts a system using areflected optic camera module. Some design parameters of the adjustablereflected optic camera module may be represented in one embodiment as:IA=(90+RA)−EAorIA=(90+(UA/2))−UAIA=90−(UA/2)

As an example, for a user angle of 45 degrees relative to the vertical:IA=90−(45/2)=67.5 degrees

According to the above design parameters, for any reasonable user angle(e.g., 90 degrees or less), the IA would be greater than 42 degrees andtotal internal reflection can be assured for interfaces between mediahaving a ratio of indices of refraction similar to that of acrylic glassand air. For instance, instead of acrylic glass, another medium of asimilar refractive index may be used. In some embodiments, anothermedium of a different refractive index (e.g., 1.2, 1.3, 1.4, 1.6, 1.7,1.8, etc.) may be used as long as the angle(s) of incidence in a givencontext or application is expected or restricted to result in totalinternal reflection. In some embodiments, the reflective optic cameramodule design of the present system leverages on lens materials (e.g.,that are moldable and/or machine-able) and/or precision manufacturing tocreate a complete reflective optic lens as a solid piece of moldedacrylic glass (or other material).

For instance, FIG. 2L illustrates one embodiment of a reflected opticscamera module. In this illustrative embodiment, components of thereflected optic lens assembly are shown, including an entrance lens, anexit lens and a mirrored surface. The mirrored surface is used in thisembodiment instead of using total internal reflection.

FIG. 2M illustrates another embodiment of a reflected optics cameramodule. In this illustrative embodiment, components of the reflectedoptics lens assembly are molded as a solid piece of acrylic glass forexample. This contrasts with the use of two or more separate componentsas shown in FIG. 2L. The optical angle of the reflected optics cameramodule may be adjusted during manufacturing to match or meet therequirements of the computing device (e.g., for total internalreflection to occur).

FIGS. 2N and 2O illustrate embodiments of a reflected optics cameramodule. As shown, the reflected optics camera module includes anentrance lens, an image sensor, and a module case for holding orcontaining the lens and sensor. A representation of electrical contactsare shown on the bottom of the camera module for mounting or connectingto a circuit board or other portion of a computing device. FIG. 2Ndepicts a cross sectional view of an embodiment of the camera moduleshowing a reflective optic lens, an image sensor, and a case. FIG. 2Odepicts a different view of one embodiment of the camera module.Although illustrated as a solid piece of molded acrylic glass or othermaterial in the shape and form shown in the various figures, othershapes and/or form are contemplated. For example, some embodiments ofthe reflected optics camera module may not be partially cylindrical inform. In certain embodiments, the reflected optics camera module mayhave a flat or curved entrance surface, which may be of a circular,oval, rectangular or other shape. In some embodiments, the reflectedoptics camera module may have a flat or curved exit surface, which maybe of a circular, oval, rectangular or other shape. In some embodiments,the reflective surface may be flat or curved, and/or of a circular,oval, rectangular or other shape. In certain embodiments, thematerial/medium may comprise regions having different refractiveindices. In some embodiments, the material/medium may comprise two ormore sections (e.g., fabricated separately and) fused or assembledtogether.

Embodiments of the present solution differ from camera modules that bendthe optical path inside the camera lens to capture images of objects at90 degrees relative to the image sensor. Such 90 degree camera modulescan only capture images of objects at 90 degrees to the laptop forexample. Such 90 degree camera modules have a limited purpose—to makethe camera module smaller in one dimension. For example, a 90 degreecamera module made with a 3 mm width image sensor with a 5 mm focallength lens using typical optics can be 7 mm in vertical length (lenslength (5 mm)+image sensor thickness (˜1 mm)+camera module casethickness (˜1 mm)). A 5 mm focal length camera with reflected optics canbe 4 mm in length (image sensor width (3 mm)+camera module casethickness (˜1 mm)) due to the optical path being folded at a 90 degreeangle inside the lens. Thus, such folded optics are only for spacesaving. The folded optic reduces the camera height from mainly the lenslength to mainly the image sensor width, which only solves the issue ofcompactness—there is no need or expectation for adjustment of theoptical angle such as to effectively acquire iris biometric informationbased on the expected posture or orientation of a user relative to acomputing device for biometric recognition purposes.

Moreover, depending on the lens material used, other systems require areflective coating. Depending on the lens material used, total internalreflection is not guaranteed at the 45 degree angle of incidence at thereflector. In addition, efficiency of light reflectance may be reducedat the critical angle. One or more embodiments of the present systemsand methods address a very different problem from other systems, forexample, how to capture images of a user's eyes for iris recognitionwhile overcoming five major issues: 1) aiming the camera at an angledifferent from the module mounting angle, 2) how to set the angle duringmanufacturing, 3) how to accommodate a wide range of angles so that eachcomputing device product has the best camera angle, 4) how to make amonolithic reflective optic lens of one piece with adjustable opticalangle, and 5) how to create the reflected surface without the added costof reflective coatings. In products where a few cents in manufacturingcosts determines the success of a product, embodiments of the presentsystems and methods can bring the security of iris recognition into wideuse.

Referring now to FIG. 2P, one embodiment of a method for acquiringbiometric data from an iris oriented at an angle to a computing deviceis depicted. The method can include receiving, via an optical entranceof an optical medium of an iris biometric camera mounted on a computingdevice, light reflected off an iris and incident on the optical entranceat a first angle relative to an optical axis of a sensor that is greaterthan zero degree and less than 90 degrees (201). The received light mayinclude iris biometric data for biometric matching. An interface betweenthe optical medium and a second medium may cause total internalreflection of the received light within the optical medium (203). Thereceived light may be incident at a second angle greater than a criticalangle of the interface. An optical exit of the optical medium may couplethe total internally reflected ray to the sensor for acquiring the irisbiometric data (205).

Referring now to 201, and in some embodiments, an optical entrance of anoptical medium of an iris biometric camera mounted on a computing devicemay receive light reflected off an iris and incident on the opticalentrance at a first angle relative to an optical axis of a sensor thatis greater than zero degree and less than 90 degrees (e.g., at 45 or 60degrees relative to the optical axis which may be pointing outwards andvertically upwards from the sensor). For instance, the optical entrancemay receive a ray incident on the optical entrance, the ray comprisingbiometric data of a subject. The optical entrance may comprise anoptical lens, which may be a separate component of a reflected opticcamera module (or iris biometric camera), or part of a monolithic pieceof material corresponding to the optical medium which may be part of acamera module (or iris biometric camera). In some embodiments, theincident ray comprises light reflected from a face and/or eye of thesubject facing or located in front of the optical entrance. The subjectmay be expected to be gazing in a general direction that is pointingdirectly towards the optical entrance, e.g., in a directionperpendicular to a primary plane of the optical entrance, or along anoptical axis of the optical entrance. For instance, the ray may compriselight reflected from an iris of the subject, which is to be acquired orcaptured by a camera module that includes the optical medium. In someembodiments, the light reflected from the iris comprises biometric datathat is to be used for biometric recognition, verification or matching,e.g., in authenticating the subject and/or providing access control forthe subject.

The camera module may be integrated or mounted on a computing device,and the computing device may be used or operated by the subject. Theoptical entrance of the camera module may be configured to be directedalong an angle towards which the face or eye of the subject is expectedto be facing, positioned and/or exposed. The optical entrance may beoriented or positioned to face towards an expected gaze direction of thesubject using the computing device. The sensor may be mounted on acircuit board of the computing device and oriented away from theexpected gaze direction. For instance, the iris biometric camera may beintegrated with or mounted to a keyboard or an input pad of thecomputing device (e.g., a laptop placed on a table). By way ofillustrations, the subject may be facing or gazing towards a screen ofthe computing device or at the keyboard, e.g., at an angle to a majorplane (and circuit board) of the keyboard. The sensor may be mounted tothe circuit board and have an optical axis that is perpendicular to thecircuit board (e.g., pointing vertically upwards), and would not haveoptimally received the incident light to image the iris. Mounting thesensor at an angle relative to the circuit board or major plane of thecomputing device may be challenging or not possible.

Thus, some embodiments of the present system and methods use the opticalentrance, which may be offset at an angle relative to the optical axisof the sensor, and oriented towards an expected gaze direction of thesubject, to receive and channel the incident light. The optical entrancemay be positioned, angled and/or shaped to be oriented towards anexpected gaze direction of a subject using the computing device.

In some embodiments, the ray incident on the optical entrance enters theoptical entrance without substantially altering its angle of incidence.For example, any change in the optical path after entering the opticalmedium may be less than a predefined angle, such as 1 degree, 3 degrees,5 degrees, 10 degrees, etc. In certain embodiments, the optical entranceis configured to direct the incident ray to the interface, a reflectivesurface or a prism of the optical medium. The optical entrance may beoriented, shaped and/or positioned to allow the incident ray to transmitor be conveyed directly onto the interface. In some embodiments, theoptical medium may correspond to a monolithic piece of material (e.g.,acrylic glass) with a predetermined or uniform refractive index, and thesecond medium may comprise air or a vacuum, e.g., around at least partof the optical medium. At least one of the optical entrance or theoptical exit may incorporate a lens structure. In some embodiments, atleast one of the optical entrance or the optical exit may comprise anoptical lens.

Referring now to 203, and in some embodiments, an interface between theoptical medium and a second medium may cause total internal reflectionof the received light within the optical medium. The received light maybe incident at a second angle greater than a critical angle of theinterface. The interface of the optical medium with a second medium mayreceive the received ray at a first angle greater than a critical angleof the interface to enable total internal reflection of the receivedincident ray. For instance, a plane of the interface may be at an angleof less than 45 degrees relative to the optical axis of the sensor. Theinterface may operate or serve as a reflective surface of the opticalmedium. In some embodiments, a reflective or mirrored coating is used inplace of the interface to reflect the received ray. In certainembodiments, a prism, lens or other optical structure or configuration,or any combination thereof, is used in place of the interface toredirect the received ray or bend the optical path of the received ray.For instance, the optical medium may be replaced with one or more of anoptical entrance lens, redirection optics (e.g., prism, lens and/orreflective mirror surface) and/or an optical exit lens. The redirectionoptics of the iris biometric camera may be configured to alter the pathof the received light towards the sensor, e.g., via reflection and/orrefraction. The redirection optics may incorporate at least one of areflecting surface or a prism.

In some embodiments, the interface is configured or designed to performtotal internal reflection of the received incident ray, according to theexpected or possible angle(s) of the ray incident on the opticalentrance. For instance, one or both refractive indices of the opticalmedium and/or the second medium may be selected so that the ray incidenton the interface exceeds the critical angle. The optical medium and/orthe second medium may be selected so that the ray incident on theinterface exceeds the critical angle. In some embodiments, the secondmedium comprises air, and the optical medium may comprise acrylic glassor another appropriate material. The interface may bend, modify orchange the optical path of the ray so that the ray is directed orreflected towards the optical exit and/or the sensor. The interface mayconfigured or designed to perform total internal reflection of thereceived incident ray, so as to modify the optical path without usingreflective or mirrored coatings.

Referring now to 205, and in some embodiments, an optical exit of theoptical medium may couple the total internally reflected ray to a sensorfor acquiring the biometric data from the total internally reflectedray. The optical exit of the optical medium may couple the light/rayfrom the interface or redirection optics, to the sensor. The ray may beincident on the optical entrance at a second angle relative to anoptical axis (or main axis) of the sensor that is less than 90 degrees.For example, the second angle may be 30, 35, 40, 45, 50, 55 or 60degrees. The optical exit may receive the ray which is total internallyreflected from the interface. The optical exit may direct, guide orcouple the ray to the sensor. The optical exit may allow the ray to passor transmit through to the sensor. The optical exit may direct the rayto be incident on the sensor along or substantially along an opticalaxis of the sensor. The sensor may acquire or capture information fromthe ray, such as the biometric data from the subject. The biometric datamay be extracted, processed and/or stored in a memory, and may becommunicated to a processor. The processor may perform biometricmatching and/or recognition on the biometric data, to authenticate thesubject and/or perform access control (e.g., for authorization of atransaction or authorization to use the computing device).

It should be noted that certain passages of this disclosure canreference terms such as “first” and “second” in connection with devices,RATs, communication protocols, etc., for purposes of identifying ordifferentiating one from another or from others. These terms are notintended to merely relate entities (e.g., a first device and a seconddevice) temporally or according to a sequence, although in some cases,these entities can include such a relationship. Nor do these terms limitthe number of possible entities (e.g., devices) that can operate withina system or environment.

It should be understood that the systems described above can providemultiple ones of any or each of those components and these componentscan be provided on either a standalone machine or, in some embodiments,on multiple machines in a distributed system. In addition, the systemsand methods described above can be provided as one or morecomputer-readable programs or executable instructions embodied on or inone or more articles of manufacture. The article of manufacture can be afloppy disk, a hard disk, a CD-ROM, a flash memory card, a PROM, a RAM,a ROM, or a magnetic tape. In general, the computer-readable programscan be implemented in any programming language, such as LISP, PERL, C,C++, C#, PROLOG, or in any byte code language such as JAVA. The softwareprograms or executable instructions can be stored on or in one or morearticles of manufacture as object code.

While the foregoing written description of the methods and systemsenables one of ordinary skill to make and use various embodiments ofthese methods and systems, those of ordinary skill will understand andappreciate the existence of variations, combinations, and equivalents ofthe specific embodiment, method, and examples herein. The presentmethods and systems should therefore not be limited by the abovedescribed embodiments, methods, and examples, but by all embodiments andmethods within the scope and spirit of the disclosure.

We claim:
 1. A system for acquiring biometric data from an iris oriented at an angle to a computing device, the system comprising: a sensor of an iris biometric camera mounted on a computing device; an optical entrance of an optical medium of the iris biometric camera, the optical entrance configured to receive light reflected off an iris and incident on the optical entrance at a first angle relative to an optical axis of the sensor that is greater than zero degrees and less than 90 degrees, the received light comprising iris biometric data for biometric matching; an interface between the optical medium and a second medium, the interface configured so that the received light undergoes only a single reflection within the optical medium, the single reflection being a total internal reflection of the received light within the optical medium at the interface, and the received light is incident at a second angle greater than a critical angle of the interface to cause the total internal reflection of the received light within the optical medium; and an optical exit of the optical medium, the optical exit configured to couple the total internally reflected light to the sensor for acquiring the iris biometric data.
 2. The system of claim 1, wherein the optical entrance is oriented towards an expected gaze direction of a subject using the computing device, and the sensor is mounted on a circuit board of the computing device and oriented away from the expected gaze direction.
 3. The system of claim 1, wherein the iris biometric camera is integrated with a keyboard or an input pad of the computing device.
 4. The system of claim 1, wherein the optical medium corresponds to a monolithic piece of material with a predetermined refractive index.
 5. The system of claim 1, wherein the second medium comprises air or a vacuum.
 6. The system of claim 1, wherein a plane of the interface is at an angle of less than 45 degrees relative to the optical axis of the sensor.
 7. The system of claim 1, wherein at least one of the optical entrance or the optical exit incorporates a lens structure.
 8. The system of claim 1, wherein the sensor is configured to acquire the iris biometric data for biometric matching to provide access control to a corresponding subject.
 9. A method for acquiring biometric data from an iris oriented at an angle to a computing device, the method comprising: receiving, via an optical entrance of an optical medium of an iris biometric camera mounted on a computing device, light reflected off an iris and incident on the optical entrance at a first angle relative to an optical axis of a sensor that is greater than zero degrees and less than 90 degrees, the received light comprising iris biometric data for biometric matching; causing only a single reflection within the optical medium, the single reflection being a total internal reflection of the received light within the optical medium at an interface between the optical medium and a second medium, the received light incident at a second angle greater than a critical angle of the interface; and coupling, by an optical exit of the optical medium, the total internally reflected light to the sensor for acquiring the iris biometric data.
 10. The method of claim 9, comprising positioning the optical entrance to be oriented towards an expected gaze direction of a subject using the computing device, wherein the sensor is oriented away from the expected gaze direction.
 11. The method of claim 9, wherein the iris biometric camera is integrated with a keyboard or an input pad of the computing device.
 12. The method of claim 9, wherein the optical medium corresponds to a monolithic piece of material with a predetermined refractive index, and the second medium comprises air or a vacuum.
 13. The method of claim 9, wherein a plane of the interface is at an angle of less than 45 degrees relative to the optical axis of the sensor.
 14. The method of claim 9, further comprising acquiring, by the sensor, the iris biometric data for biometric matching to provide access control to a corresponding subject.
 15. A system for acquiring biometric data from an iris oriented at an angle to a computing device, the system comprising: a sensor of an iris biometric camera mounted on a computing device; an optical entrance of an iris biometric camera, the optical entrance configured to receive light reflected off an iris and incident on the optical entrance at an angle relative to an optical axis of the sensor that is greater than zero degrees and less than 90 degrees, the received light comprising iris biometric data for biometric matching; redirection optics of the iris biometric camera configured to alter the path of the received light towards the sensor via only a single reflection within an optical medium, the single reflection being a total internal reflection of the received light within the optical medium at an interface between the optical medium and a second medium, the received light incident at a second angle greater than a critical angle of the interface; and an optical exit of the iris biometric camera, the optical exit configured to couple the light corresponding to the total internal reflection of the received light, from the redirection optics to the sensor for acquiring the iris biometric data.
 16. The system of claim 15, wherein the optical entrance is oriented towards an expected gaze direction of a subject using the computing device, and the sensor is mounted in the computing device and oriented away from the expected gaze direction.
 17. The system of claim 15, wherein the iris biometric camera is integrated with a keyboard or an input pad of the computing device.
 18. The system of claim 15, wherein the redirection optics incorporate at least one of a reflecting surface or a prism.
 19. The system of claim 15, wherein at least one of the optical entrance or the optical exit comprises a lens.
 20. The system of claim 15, wherein the sensor is configured to acquire the iris biometric data for biometric matching to provide access control to a corresponding subject. 